Last updated: 1 May 2026

1. Introduction

MTDflow Ltd (“we”, “our”, “us”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal data when you use the MTDflow platform and related services.

MTDflow is designed to help self-employed individuals and subcontractors maintain digital bookkeeping records and prepare information compatible with HMRC Making Tax Digital requirements.

2. Information We Collect

We may collect and process the following categories of information:

• Name
• Email address
• Phone number
• Business details
• HMRC-related information
• Uploaded documents and records
• Bank statements
• CIS statements
• Transaction data
• Technical information such as IP address and device information

3. How We Use Your Information

We use your information to:
• Provide bookkeeping and tax-related functionality
• Categorise transactions using AI-assisted processing
• Generate draft tax calculations
• Maintain MTD-compatible records
• Submit authorised information to HMRC
• Improve platform performance and security
• Provide customer support

4. AI-Assisted Processing

MTDflow uses automated and AI-assisted systems to help categorise transactions and identify bookkeeping information.

Users remain responsible for reviewing and approving submitted information.

5. HMRC Integration

Where users choose to connect their HMRC account:
• access is authorised directly by the user,
• MTDflow only accesses permitted HMRC data,
• credentials are never shared directly with MTDflow.

6. Legal Basis for Processing

We process personal data under:
• performance of a contract,
• compliance with legal obligations,
• legitimate interests,
• user consent where required.

7. Data Sharing

We do not sell personal data.

We may share data with:
• HMRC where authorised,
• cloud infrastructure providers,
• payment processors,
• analytics and security providers.

8. Data Security

We implement reasonable technical and organisational security measures including encrypted transmission, restricted access controls, and secure cloud infrastructure.

9. Data Retention

We retain information only as long as necessary to provide services and comply with legal obligations.

10. Your Rights

Under UK GDPR, users may have rights including:
• access to personal data,
• correction of inaccurate information,
• deletion of personal data,
• restriction of processing,
• data portability.

11. Contact Us

MTDflow Ltd
42 London Rd
Stroud
GL5 2AJ

Email: hello@mtdflow.co.uk
Website: www.mtdflow.co.uk
Company Number: 17053425